Most of this falls under the heading of 'shit happens' IMO. What I mean by that is, yes, there's a bug in the design of the processor, to the extent that it allows bad actors to access data that it shouldn't, but IMO, there are FAR more serious problems out there (like the rowhammer vulnerability). Complex systems are going to have flaws. We try to do what we can to mitigate those flaws, but as systems become more complex, so do their flaws. It's only a matter of time before someone figures out how to exploit it.
Think of it this way: I hire someone to build a house for me. They put in a big thick door, with a nice heavy duty lock, bars over the windows, and someone breaks in by literally going through the wall. Is that the fault of the lock? Is it the fault of the door? Of the manufacturer of the wall materials? Of the contractor who built the house? Of the architect who designed it?
There are ALWAYS ways for someone to break a system, if they are determined enough to find them.
Where Intel gets in hot water is the fact that they have apparently been aware of this since June, and didn't say anything until January. More damning, their CEO sold something like 24 million dollars worth of stock and options, the SAME DAY they disclosed the vulnerability to select partners, keeping only the minimum 250,000 shares required by Intel's bylaws. In addition to that, they told the CHINESE before they told our OWN GOVERNMENT.
The way Intel have handled this whole thing reeks.
What REALLY torques me off about this whole deal, though, is that while Intel's stock took a short-term hit after the disclosure, it has already rebounded. Why? Because the stock market sees this as an OPPORTUNITY for Intel to MAKE MORE MONEY. After, those CPUs that are affected by the vulnerability are now going to have to be replaced. That means more sales for Intel.
It makes me want to start pouring boiling oil on certain people. It seems like the money folks have given ZERO consideration to the consequences of their actions.
